Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f96393a9-6118-3c70-8945-5606e55b0377.roa
File:                     f96393a9-6118-3c70-8945-5606e55b0377.roa (raw, json)
Hash identifier:          W1FGdDHdlD3CA4xpux1BhKP5WCWbiSQHx3yKZ/iGAhc=
Subject key identifier:   81:88:B4:D4:50:0D:A1:6D:4B:FA:40:45:E7:44:51:1E:D8:4B:0B:D8
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285845628E99303D52E49D8358C000
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f96393a9-6118-3c70-8945-5606e55b0377.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     20115
IP address blocks:        24.240.142.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8e:99:30:3d:52:e4:9d:83:58:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=f6dfa73b-90c5-42d9-9a4b-e14596a4039b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:3d:44:f0:d9:ec:66:c5:ae:b7:37:d2:09:
                    33:b1:09:c0:e5:41:94:47:d2:8e:af:da:d0:e9:68:
                    0f:2a:7b:da:e8:e7:cf:dd:a4:9a:54:50:4c:65:6b:
                    cb:56:01:1c:6c:2b:c6:8c:c5:61:60:f9:cb:b9:65:
                    80:fe:04:2a:5c:a8:3c:2b:05:ec:24:1b:ea:0f:57:
                    6f:bc:2d:69:56:2a:72:3c:ff:6a:f3:62:31:49:23:
                    9a:b6:0d:ef:fc:70:fb:18:a8:d5:01:68:0d:7d:f2:
                    08:63:d1:9d:dc:95:d2:fa:5e:2b:11:da:3c:86:be:
                    b4:b6:e1:36:65:62:a7:4c:87:06:bc:f0:06:8d:ca:
                    ea:1f:a0:23:47:62:bb:cf:e6:18:a6:bb:67:03:a6:
                    b7:fe:69:c3:a9:1f:25:9f:7f:c6:aa:4b:1d:ba:7b:
                    10:27:ec:4e:4c:6e:15:73:ed:0c:fb:12:1a:fd:3a:
                    98:a8:62:17:a8:9f:b5:8c:96:45:62:18:c1:30:5c:
                    65:97:3d:8c:25:fd:20:ba:7b:1b:87:24:10:16:01:
                    cd:45:eb:cd:0e:ca:46:da:b7:28:01:31:24:7b:5d:
                    aa:2f:82:96:6c:e6:7b:63:21:0d:2f:2d:d0:a8:a8:
                    17:8c:55:6c:8f:29:af:68:77:7d:ab:4b:d9:de:08:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:88:B4:D4:50:0D:A1:6D:4B:FA:40:45:E7:44:51:1E:D8:4B:0B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/f96393a9-6118-3c70-8945-5606e55b0377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.240.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:82:a3:67:55:58:a0:01:10:ce:c9:d7:42:eb:cc:93:10:27:
         59:55:fe:99:98:9d:a2:84:c4:59:6a:7e:c0:37:19:a9:5f:7b:
         90:40:9e:98:25:cf:a0:ba:ee:a2:fc:e0:94:0c:a0:85:5a:71:
         b4:7a:3a:72:be:73:26:d7:aa:ba:46:40:fa:0c:5d:aa:7f:a5:
         8b:fb:ef:b8:88:1d:91:60:cb:ff:5b:45:96:74:5e:ec:fb:62:
         3f:59:4d:da:51:cd:00:9b:d4:42:6d:5f:91:90:fc:3d:ae:97:
         92:bb:b1:8e:5b:43:f8:e9:72:a4:e1:6d:63:36:2e:0c:2b:8c:
         03:57:41:96:37:3d:a3:41:1c:06:cb:04:ba:33:35:e6:25:1c:
         b9:a9:ec:8f:30:ef:d1:64:62:5c:b4:68:e6:ec:97:f3:06:39:
         b3:6d:99:67:16:62:f0:df:45:97:f1:08:bc:0d:49:58:45:da:
         6e:9a:d9:33:58:f1:05:98:c9:65:6f:de:c9:9f:8a:b2:2f:09:
         93:70:dd:02:f6:7f:ef:ad:c4:5b:4e:ef:63:ce:79:bd:f7:56:
         b5:ef:88:0c:09:28:5d:21:30:e9:7d:f7:96:6f:2e:dd:e0:a0:
         a8:f7:f5:f6:1b:c0:c4:be:94:4b:ce:bd:cb:46:cf:ac:5f:9e:
         68:0c:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:55:21 2024 by rpki-client on console-ams.rpki-client.org